[ "毛传武(1991-),男,湖北武汉人,华中科技大学硕士生,主要研究方向为网络信息安全。" ]
[ "程阳(1986-),男,湖北武汉人,华中科技大学博士生,主要研究方向为人工智能与模式识别。" ]
[ "余文明(1991-),男,湖北黄冈人,华中科技大学硕士生,主要研究方向为网络信息安全。" ]
网络首发:2016-12,
纸质出版:2016-03-15
移动端阅览
毛传武, 程阳, 余文明. 动态实时身份认证的方法研究[J]. 网络与信息安全学报, 2016,2(3):76-85.
Chuan-wu MAO, Yang CHENG, Wen-ming YU. Method of dynamic real-time authentication[J]. Chinese Journal of Network and Information Security, 2016, 2(3): 76-85.
毛传武, 程阳, 余文明. 动态实时身份认证的方法研究[J]. 网络与信息安全学报, 2016,2(3):76-85. DOI: 10.11959/j.issn.2909-109x.2016.00040.
Chuan-wu MAO, Yang CHENG, Wen-ming YU. Method of dynamic real-time authentication[J]. Chinese Journal of Network and Information Security, 2016, 2(3): 76-85. DOI: 10.11959/j.issn.2909-109x.2016.00040.
为减小身份伪冒给企业和组织带来的内部威胁,提出了一种全场景下动态实时身份认证方法。利用伪造的鼠标异常构建动态身份认证场景;当出现连续的动态认证异常时,系统引导用户进行了由记忆游戏构建的固定场景身份认证。对15位用户进行了身份认证实验,得到了3.0%的拒真率、1.8%的容错率以及8.12 s的认证时间。实验表明,动态场景和固定场景身份认证的有效配合,不仅克服了固定场景无法实时身份认证的弊端,而且保证了用户的体验,同时提高了身份认证的准确率。
To solve the problem organization’s insider threats which was brought by internal staff through identity spoofing. A method of dynamic real-time authentication was presented. By faking exceptions of mouse to build dynamic authentication
when continuously consecutive authentication were abnormal
user was forced into fixed scene certification which was building of memory game. An identity verification experiment
in which 15 participants were involved
showed that the performance of proposed method was encouraging with FAR of 1.8% and FRR of 3.0% and authentication time of 8.12 s for authentication. The experiment shows that the method is not only real-time but also has a better user experience and accuracy.
CHEN X J , SHI J Q , XU R , et al . PAITS: detect masquerader via short-lived interventional mouse dynamics [M ] . Berlin: Springer , 2014 : 231 - 242 .
CHEN X J , XU F , XU R , et al . A practical real-time authentication system with identity tracking based on mouse dynamics [C ] // IEEE INFOCOM .c 2014 : 121 - 122 .
CHEN X J , FANG B X , TAN Q F et al . Inferring attack intent of malicious insider based on probabilistic attack graph model [J ] . Chinese Journal of Computers , 2014 , 37 ( 1 ): 62 - 72 .
魏梓丞 . 面向身份伪冒的主机异常行为检测 [D ] . 北京:北京邮电大学 2014 .
WEI Z C . Abnormal behavior detection of host computer for identity based intrusion detection [D ] . Beijing:Beijing University of Posts and Telecommunications 2014 .
陈小军 , 时金桥 , 徐菲 , 等 . 面向内部威胁的最优安全策略算法研究 [J ] . 计算机研究与进展 2014 : 51 ( 7 ) 1565 - 1577 .
CHEN X J , SHI J Q , XU F , et al . Research on the optimal security policy algorithm for internal threats [C ] // Computer Research and Development , 2014 , 51 ( 7 ) 1565 - 1577 .
ZHENG N , PALOSKL A , WANG H . An efficient user verification system via mouse movements [C ] // ACM Conference on Computer& Communications Security .c 2011 : 139 - 150 .
PUSARA M , BRODLEY C E . User re-authentication via mouse movements [C ] // Workshop on Visualization & Data Mining for Computer Security .c 2004 : 1 - 8 .
AHMED A , TRAORE I . Detecting computer Intrusions using behavioral biometrics [C ] // The third Annual Conference on Privacy, Security and Trust .c 2005 : 91 - 98 .
GAMBOA H , FRED A . A behavioral biometric system based on human-computer interaction [C ] // The International Society for Optical Engineering .c 2004 : 381 - 392 .
房超 , 蔡忠闽 , 沈超 , 等 . 基于鼠标动力学模型的用户身份认证与监控 [J ] . 西安交通大学学报 2008 , 10 ( 40 ) 1235 - 1239 .
FANG C , CAI Z M , SHEN C , et al . Authentication and monitoring of user identities based on mouse dynamics [J ] . Journal of Xi'an Jiaotong University , 2008 , 10 ( 40 ) 1235 - 1239 .
沈超 , 蔡忠闽 , 管晓宏 , 等 . 基于鼠标行为特征的用户身份认证与监控 [J ] . 通信学报 2010 , 31 ( 7 ) 68 - 75 .
SHEN C , CAI Z M , GUAN X H , et al . User identity authentication and monitoring based on the behavior of the mouse [J ] . Journal of Communication , 2010 , 31 ( 7 ) 68 - 75 .
王森 , 蔡忠闽 , 沈超 , 等 . 行为截获技术对鼠标动力学身份认证的影响 [J ] . 微电子学与计算机 2013 , 30 ( 4 ) 14 - 21 .
WANG S , CAI Z M , SHEN C , et al . The influence of the technology on the dynamic identity authentication of the mouse [J ] . MiCroelectronics and Computer , 2013 , 30 ( 4 ) 14 - 21 .
王鑫 , 王梦莹 , 梁金 , . 基于鼠标键盘行为的身份认证 [J ] . 中国教育技术装备 , 2014 ( 22 ): 50 - 53 .
WANG X , WANG M Y , LIANG J . Identity authentication based on the behavior of the mouse and keyboard [J ] . China Educational Technology and Equipment , 2014 ( 22 ): 50 - 53 .
WEI Z , CHEN X , PU Y et al . A real-time authentication method based on cursor-hidden scene [J ] . International Workshop on Cloud Computing & Information Security , 2013 , 52 ( 1391 ): 346 - 350 .
0
浏览量
3046
下载量
0
CSCD
关联资源
相关文章
相关作者
相关机构
京公网安备11010802024621